Create ApiAuthorizedAction and everything it needs

[refs #75075704]
Make a first API endpoint. [finishes #75075704]